Изтегли я от официалния им сайт http://www.cheatengine.org/
.. И не, не е вирус -- но ако не знаеш за какво се използва не я сваляй
Код:
Yes, we know your crappy AV thinks CE is a virus. No need to tell us.
There are 4 solutions to this problem:
1: Don't install CE
2: Send ce to your av vendor and tell them to remove the detection and wait a few years till they do it...
3: Uninstall your anti virus
4: If your AV supports it: Add ce to the ignore list
and don't worry. I'm working on a solution for next version. I'll bring out 2 versions. The original version, and the 'retarded idiot' version which will have no driver(So No viruzzz! omg!) and lacks a lot of features. So people worried about stuff like that can happily use the 'retarded idiot' version and feel safe in their nice little bubble of fake security (and probably won't be able to do much with it, but hey, it keeps them happy right ?)
And if you're wondering why the driver is detected that is because it uses some of the Zwxxxx functions exported by windows meant to be used by drivers. And it also uses the exported variable KeServiceDescriptorTable. (Also provided by windows to be used by drivers)
Now since anti virus programmers have no idea how to detect a rootkit, they just look at suspicious behaviour. And any driver that uses those functions that are exported by windows is classified as a trojan rootkit.
Thats kinda like saying that everyone carrying a gun is a psychopathic murderer. (while only 85% of them actually is)